Security News
Supply Chain Attack Detected in Solana's web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
github.com/ocramh/fingerprinter
Fingerprinter is a CLI tool and go library that can be used for
This tool leverages Chromaprint and its associated Acoustid Web Service to generate acoustic fingerprints. These fingerprints can then be used to verify the origin and content of an audio file. Specifically the Fingerprinter package generates audio fingerprints to ultimatley determine the author(s), album(s), record label(s) and ISRC codes associated with a recording.
In Progress
The only required dependency is Chromaprint.
When running the application locally, the Chromaprint executable (fpcalc
) must be on the $PATH
.
See the Chromaprint repo for downloads and information about how to build it locally.
The provided Dockerfile comes with Chromaprint installed and it is the recommended way to get up and running if installing local dependencies is not desirable.
Fingerprinter exposes a simple CLI interface. To see the available commands run
Usage:
fingerprinter [command]
Available Commands:
fpcalc Calculates the fingerprint of the input audio file
acoustid Queries the AcoustID API to match a fingerprint with a recording ID(s)
help Help about any command
mblookup Queries the MusicBrainz API and returns metadata associated with a recording ID
verify Verifies input audio metadata and returns the associated release(s) info
Flags:
-h, --help help for fingerprinter
The Dockerfile can be used to build and run the application and automatically takes care of installing all the required dependencies.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.